MINING SIDE CHANNEL TACKS USING EXECUTABLE ONLY STORAGE (XOM)

摘要

The present disclosure thus relates to systems and methods that include side-channel defense circuitry for protecting shared code pages in an executable-only memory (XOM) from side-channel attacks. The side channel defense circuitry receives system calls and determines whether code pages include executable code, whether the code pages include writable code, and whether the code pages include instructions that can change or modify one or more protection keys associated with code pages stored in XOM. If the code pages include executable code that is writable or executable code that includes instructions that are capable of changing or modifying one or more protection keys associated with code pages stored in XOM, the side channel defense circuitry aborts the system call.